Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/9dknCUMR43dDBEOaMLoisg2Gu7I.roa
File:                     9dknCUMR43dDBEOaMLoisg2Gu7I.roa (raw, json)
Hash identifier:          /m/iczoLtIKKSBXjyq3U2IIRiQrpiGoR+tOQAyV2PLk=
Subject key identifier:   F5:D9:27:09:43:11:E3:77:43:04:43:9A:30:BA:22:B2:0D:86:BB:B2
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0B12
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/9dknCUMR43dDBEOaMLoisg2Gu7I.roa
Signing time:             Sun 07 Feb 2021 13:10:12 +0000
ROA not before:           Sun 07 Feb 2021 13:10:12 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        60.199.224.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2834 (0xb12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Feb  7 13:10:12 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=F5D927094311E3774304439A30BA22B20D86BBB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:24:17:01:de:6a:13:12:45:21:64:33:d4:bc:
                    1c:24:49:e5:ce:6c:f2:67:97:e9:12:cc:45:df:19:
                    52:f2:5b:52:0f:1d:c8:b8:53:4e:d2:83:c5:0d:95:
                    3a:ef:c2:eb:e4:ca:f3:48:02:18:c5:e2:6b:2e:0e:
                    c2:99:51:72:d9:05:9c:fe:9d:ca:03:c5:46:cb:e0:
                    32:25:f4:46:13:fa:d3:75:95:9f:9b:fd:2c:ff:4c:
                    24:b2:67:b4:df:84:71:5a:d5:3d:82:86:70:a6:83:
                    bf:8e:09:26:ff:94:83:d0:97:4d:ab:e8:9f:4e:ad:
                    63:d5:eb:4a:71:38:a0:d9:4d:43:de:12:3a:28:b3:
                    8b:b1:5f:e5:b4:e9:80:b7:c8:44:5d:4f:09:83:3d:
                    5a:88:dd:e2:14:fe:67:df:2e:f4:f8:e8:b5:c5:6a:
                    d0:fc:fb:a1:e3:05:ac:14:64:44:3b:9b:f7:15:eb:
                    b7:96:5d:b0:d6:4f:92:88:9a:9b:16:de:6c:20:d0:
                    6b:b9:a2:c0:4b:da:27:71:8f:3f:a2:62:5d:af:64:
                    c1:82:d8:33:94:b8:d0:b0:ad:6c:d5:84:30:c3:18:
                    cc:85:c2:bc:e2:6b:94:45:de:91:fd:ea:ec:97:4d:
                    10:50:45:44:30:34:01:aa:87:a6:66:68:ee:5d:f5:
                    11:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:D9:27:09:43:11:E3:77:43:04:43:9A:30:BA:22:B2:0D:86:BB:B2
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/9dknCUMR43dDBEOaMLoisg2Gu7I.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  60.199.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:f1:f0:ba:11:2b:dc:0b:16:cf:73:a7:ae:51:b6:1a:df:8d:
         11:c9:ee:94:2f:93:72:fc:46:bf:6a:07:1b:13:2b:88:cb:a9:
         ea:83:92:0e:a5:ce:43:93:c9:df:c0:a4:c3:8e:e4:31:bd:32:
         4e:6e:29:8e:6e:97:23:72:e1:63:b6:c6:ff:41:94:1e:72:31:
         d8:11:0d:46:22:39:da:5c:3f:99:d4:44:02:1b:61:60:a4:d0:
         a3:0f:d6:13:cb:60:16:44:46:9e:9c:8c:ee:e5:c9:4b:99:2f:
         d9:39:80:79:8f:bb:8d:5e:b0:c6:cd:4e:c7:3f:a9:ca:38:27:
         a7:bc:bc:0b:41:63:25:a3:a4:05:e5:7b:e2:2d:06:77:51:a7:
         53:9d:1d:b3:b1:9c:6f:d1:f4:69:6b:bc:16:3c:5d:a6:e4:79:
         25:c0:25:2f:b8:38:59:c6:e2:34:1b:d6:dd:6a:bc:20:78:9c:
         e8:f3:43:9c:fc:1b:f5:59:ec:bf:b6:22:10:32:f1:d9:46:d7:
         73:22:52:b1:8b:b0:5e:e6:bf:f1:95:ec:fe:42:41:91:de:c1:
         69:fd:51:4c:66:cb:ae:75:a1:0a:9b:10:6d:25:34:a8:e3:05:
         b7:bc:fe:2e:ac:18:ee:ac:3d:d2:f0:4b:b7:12:00:02:46:fb:
         e1:83:b4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:43 2024 by rpki-client on console-fra.rpki-client.org